Privacy Policy

Note: this describes how the platform is built. Have it reviewed against the privacy law that applies to you before launch.

What we collect

• Account data: name, username, email address, password hash, and optional country.
• Product data: everything you submit about a product, including images and links.
• Payment data: order references, amounts, currency, status and gateway identifiers. Card details are handled by Razorpay and never reach our servers.
• Activity data: platform events such as listing views and outbound clicks, recorded with a hashed IP address rather than the address itself.
• Support data: messages you send us.

What we do not collect

We do not ask for or store card numbers, government identifiers, or sensitive personal categories, and we do not use sensitive personal information for recommendations.

Why we use it

• To run your account and show your products.
• To calculate prices, process payments and issue invoices.
• To produce the analytics shown on your dashboard and aggregate public counts.
• To detect fraud and abuse, and to keep audit records of financial and moderation actions.
• To send transactional email, and digests you have opted into.

Who we share it with

Our payment processor (Razorpay), our email provider, our hosting and storage providers, and error monitoring. We do not sell personal data.

Public information

Product listings, your public profile name, comments, current rank and ranking history are public by design. Payment amounts attached to a position are public because the board's premise is price transparency; your personal contact details are not.

Retention

Account data is kept while your account exists. Financial records, invoices, ranking history and audit logs are retained as long as required for accounting and dispute resolution, even after account deletion.

Your rights

You can access and correct your data from your account settings, and you can delete your account from the same place. Where local law gives you rights of access, correction, deletion, portability or objection, write to noreply@appranking.in.

Cookies

We set a session cookie to keep you logged in and a CSRF cookie to protect forms. These are required for the site to function.

Security

Passwords are hashed, payment and webhook signatures are verified server-side, sensitive actions are authorised and logged, and access to private verification documents is restricted.